
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa
File: PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa (raw, json)
Hash identifier: xCABqx02nxLtGIHGZEkpKQC2sCkk6C9g1r6xD1Lc9H0=
Subject key identifier: 3C:F8:FC:AF:15:7F:63:89:7A:A0:8B:80:E2:C6:B0:CB:93:93:43:9A
Certificate issuer: /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial: 99
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa
Signing time: Tue 31 Mar 2026 07:35:20 +0000
ROA not before: Tue 31 Mar 2026 07:35:20 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 7684
IP address blocks: 153.126.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 14:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Validity
Not Before: Mar 31 07:35:20 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=3CF8FCAF157F63897AA08B80E2C6B0CB9393439A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:39:9f:46:39:bd:ac:e8:76:1b:9a:be:8a:
a6:04:e5:de:3a:59:a7:c7:57:bf:84:7e:9e:c5:22:
a0:ea:9f:09:d9:01:90:27:12:60:00:e6:77:07:f3:
b0:a0:9c:53:2d:c7:f1:9a:cb:60:c6:46:7d:15:0a:
26:60:7d:83:f5:26:04:58:b1:bc:b5:a4:b5:ef:cd:
fe:a5:80:14:13:8a:df:75:f5:b0:f9:66:74:8b:ca:
1b:e7:ab:c7:35:fe:84:87:07:0c:4f:6b:58:34:03:
25:0c:dd:57:d1:a3:47:07:81:30:8f:7f:51:29:94:
5a:8e:2c:4d:d9:bf:7a:22:40:62:04:e0:68:18:4c:
96:d1:05:94:37:d4:58:c6:b4:91:d6:c0:db:20:e5:
14:77:5e:0b:aa:1c:39:88:f3:ad:c4:6c:46:d4:fe:
36:69:ec:74:f5:9f:6e:9d:57:91:33:62:dc:9c:a9:
5a:7f:b6:85:4a:07:b3:12:92:4e:5f:bb:4c:3d:fb:
ff:eb:ff:d4:8b:10:b1:17:e3:28:51:7b:61:a4:d7:
54:d4:83:a6:ee:21:74:0a:f3:b6:d6:45:45:61:51:
8e:48:8a:30:73:95:3a:c6:db:27:85:a1:d2:31:2a:
f5:31:5b:08:ef:91:c3:ca:f5:85:1e:e6:ea:f0:14:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F8:FC:AF:15:7F:63:89:7A:A0:8B:80:E2:C6:B0:CB:93:93:43:9A
X509v3 Authority Key Identifier:
keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/PPj8rxV_Y4l6oIuA4sawy5OTQ5o.roa
sbgp-ipAddrBlock: critical
IPv4:
153.126.128.0/17
Signature Algorithm: sha256WithRSAEncryption
a6:3c:8a:c2:c4:90:49:fd:28:fe:80:0c:19:88:2a:aa:3e:e1:
c4:d9:3e:00:9e:d5:80:a0:fe:42:1b:a8:94:3c:04:b2:10:33:
4e:d2:cd:4a:c0:a9:6b:ce:80:f3:42:cf:71:f4:da:57:48:74:
98:fe:2a:1e:98:c6:bd:d5:d0:64:b8:a4:1f:b1:29:4c:28:e6:
73:9e:1f:9f:fc:b7:59:1e:83:46:0b:1e:16:23:25:4c:11:d5:
2f:c5:f2:c1:82:07:61:7c:b0:8a:18:6c:dd:d9:5f:68:d3:c4:
5e:74:c5:83:1a:ec:53:66:81:3e:1a:ad:0b:60:62:58:8c:85:
31:26:76:14:39:41:68:b2:61:70:fd:df:1e:c2:48:29:39:37:
3a:9c:8f:62:0e:bc:c6:25:fd:d6:c7:89:70:c0:53:e7:33:c6:
12:c0:f9:7f:26:03:70:16:e3:47:50:fb:41:2f:42:f1:33:db:
4e:3d:f3:72:3f:9c:33:80:7a:22:69:f3:42:a5:0e:2d:d9:a3:
d6:3d:1a:85:b0:b8:ac:86:46:93:44:39:32:3f:ff:19:51:10:
32:0d:4e:13:20:f8:ea:c2:95:4d:46:aa:24:35:b3:7b:49:17:
39:dc:18:e8:a4:0a:aa:4a:20:98:a0:5f:f0:ed:0a:37:ac:e8:
d0:db:b5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:29 2026 by rpki-client